1.8.4 // Whitelist Logging, On-Demand File Generation, Security Hardening & Improvements
In this Build
Addition
Server Whitelist Logging
- Multi-Action Whitelist Tracking: Captures
/whitelist add <player>,/whitelist remove <player>,/whitelist on,/whitelist off, and/whitelist reload(including/minecraft:whitelist ...and console commands). - Multi-Channel Delivery:
- Files: Logged directly to
logs/Server Whitelist/<date>.log. - Discord Addon: Routed to
Discord.Server-Side.Whitelist(Channel-IDorWebhook) with executing admin's avatar & name in embeds. - Database: Logged to
server_whitelisttable with auto-schema migration and index acceleration. - In-Game Inspector: Fully integrated into
/logger view SERVER_WHITELIST. - Web Panel: Added
server_whitelistdefinition inlogs.php.
- Files: Logged directly to
- Full Localization: Translated across all 11 bundled language files (
en_US,de_DE,fr_fr,es_ES,it_IT,pt_BR,ru_RU,zh_cn,ja_JP,ko_KR,ar).
On-Demand File & Folder Generation
- Zero Startup Clutter: Directories and
.logfiles are now created strictly on-demand when an event actually occurs, eliminating empty folders and 0-byte log files on boot across Spigot, Paper, BungeeCord, and Velocity. - Full Suppression Support: Completely halts file/folder generation when
Log-to-Files: false(orFiles.Enabled: falseon Velocity) is configured. - Cleaner Hardening: Added null-safety checks in the retention cleaner (
deleteFiles()) to preventNullPointerExceptionon uncreated folders.
Database Security & Driver Hardening
- PostgreSQL Driver: Upgraded
org.postgresql:postgresqlto42.7.13(resolves SCRAM auth CPU exhaustion DoS - CVE-2026-42198 / Dependabot #23). - MariaDB Connector: Upgraded
org.mariadb.jdbc:mariadb-java-clientto3.3.5(resolves CVE-2026-55856, CVE-2026-55857, CVE-2026-55858 / PR #72). - MySQL Connector: Migrated
mysql:mysql-connector-javato moderncom.mysql:mysql-connector-j8.2.0(resolves CVE-2023-22102).
Proxy Placeholder & Event Fixes (Velocity & BungeeCord)
- Backend Server Priority: Fixed placeholder evaluation order so
%server%accurately reflects the connected backend server (e.g.lobby,survival) instead of falling back to the proxy name (#47). - New
%proxy%Placeholder: Added%proxy%across file logs and Discord messages to explicitly reference the proxy network name. - Velocity Login Hardening: Safe optional server extraction (
player.getCurrentServer().map(...)) onOnLogin.
Discord Addon & Staff Segregation
- Discord Exemption: Implemented
logger.exempt.discord(loggerproxy.exempt.discord) to exempt designated players from Discord alerts while keeping local/database logs intact. - Exemption Enforcement: Centralized
logger.exemptat the entry point ofLoggerManagerand proxy managers. - Staff Channel Segregation: Prevented fallback from
STAFFnotifications to public player channels when a dedicated staff channel is omitted. - Canonical Config Location: Canonical
discord.ymlis now situated insideplugins/Logger/(plugins/LoggerBungee/on BungeeCord) with automatic migration fromplugins/LoggerDiscordAddon/. - Custom Titles: Added optional custom
Titleconfiguration per Discord channel/webhook route.
Performance & Stability
- Enchantment Null-Safety: Guarded against null enchantments, item stacks, and tables in
ItemEnchantListener(#68). Added support for 1.21+ vanilla enchantments (Density, Breach, Wind Burst) and custom enchantments. - Codebase Cleanliness: Removed all 15 unused and duplicate import statements across all 189 source files.
- Web Panel Heartbeat: Added universal
server_statusschema with live status detection cards for Logger Core and Discord Addon. - GitBook Docs Suite: Added 26-page documentation overhaul in
docs/with.gitbook.yamlfor instant GitBook Git Sync.
P.S. If you want the Discord addon, join our Discord Server!